
HealthEquity Company Cyber Security Posture
healthequity.comHealthEquity is a leading administrator of Health Savings Accounts (HSAs) and other consumer-directed benefits—FSA, HRA, COBRA, and Commuter. Benefits advisors, health plans, and retirement providers partner with us to help over 16 million members work toward long-term health and financial wellbeing. Visit HealthEquity.com to see our intuitive technology and remarkable service in action.
HealthEquity Company Details
healthequity
2319 employees
40606.0
52
Financial Services
healthequity.com
52
HEA_2172269
In-progress

Between 500 and 600
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.

.png)

HealthEquity Company Scoring based on AI Models
Model Name | Date | Description | Current Score Difference | Score |
---|---|---|---|---|
AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 500 and 600 |
HealthEquity Company Cyber Security News & History
Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
---|---|---|---|---|---|---|---|
HealthEquity | Breach | 85 | 4 | 7/2024 | HEA002032225 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: HealthEquity suffered a data breach affecting over four million individuals. Compromised data includes names, addresses, phone numbers, employee IDs, employer information, social security numbers, dependent information, and payment card details. Although not all records contained complete data sets, the breach's scale is considerable given HealthEquity's customer base of over 15 million accounts. The company has taken measures to enhance security and prevent future incidents, alongside offering identity theft protection services to the impacted customers. | |||||||
HealthEquity | Data Leak | 60 | 3 | 06/2018 | HEA12299822 | Link | |
Rankiteo Explanation : Attack with significant impact with internal employee data leaksDescription: HealthEquity has notified individuals potentially impacted by a security incident. A single employee’s email account was accessed by an unauthorized individual that has culminated in the disclosure of protected health information. As soon as HealthEquity discovered the incident, the unauthorized individual’s access to the mailbox was eliminated and an investigation was initiated to determine the nature and scope of the event. HealthEquity confirmed that only one email account belonging to a single HealthEquity employee was compromised as a result of human error. No other HealthEquity systems were impacted or affected. The email account contained protected health information including names, emails, HealthEquity member IDs, employer names, HealthEquity employer IDs, and healthcare account type, deduction amounts, and Social Security numbers for some Michigan-based employees. |
HealthEquity Company Subsidiaries

HealthEquity is a leading administrator of Health Savings Accounts (HSAs) and other consumer-directed benefits—FSA, HRA, COBRA, and Commuter. Benefits advisors, health plans, and retirement providers partner with us to help over 16 million members work toward long-term health and financial wellbeing. Visit HealthEquity.com to see our intuitive technology and remarkable service in action.
Access Data Using Our API

Get company history
.png)
HealthEquity Cyber Security News
Leadership Dialogue Series: Cybersecurity and the Fight to Safeguard Health Care
From ransomware attacks to data breaches, the stakes for hospitals and health systems to protect their patients have never been higher.
HSA administrator HealthEquity discloses data breach impacting 4.3M
HealthEquity, a prominent health savings account administrator, has disclosed a data breach it says impacted 4.3 million people.
Health Care: Cyber Attacks, Worrying Trends and Solutions
Cyber threats against hospitals are surging. What steps are being taken by the health-care sector to address the increasing impacts of cyber ...
Security leaders respond to HealthEquity data breach
4.3 million individuals were impacted by a HealthEquity data breach, and security leaders are sharing their insights.
Cyberattackers Accessed HealthEquity Customer Info via Third Party
HealthEquity, a Utah-based health savings account (HSA) provider, has disclosed a data breach affecting 4.5 million customers across the US.
How Healthcare Cyberattacks Broke Records in 2024
2024 was a tumultuous year for cyber in the health sector. Hospitals, doctors and their business associates reported hundreds of health data ...
White House OMB is reviewing proposed cybersecurity updates to HIPAA
White House OMB is reviewing proposed cybersecurity updates to HIPAA. The Office of Management and Budget will consider HHS' approach to ...
4.3 Million People Affected By HealthEquity Data Breach
Benefits administrator HealthEquity says that an unauthorized third party compromised a partner's account, resulting in a data breach.
What we can learn from 2024's top 5 healthcare cyberattacks
Learn about the largest healthcare cyberattacks in 2024 and why cybersecurity is important for the industry.

HealthEquity Similar Companies

ActivePath (now Broadridge)
ActivePath is now a part of Broadridge. Broadridge Financial Solutions (NYSE: BR), a global Fintech leader with $5 billion in revenues, provides the critical infrastructure that powers investing, corporate governance, and communications to enable better financial lives. We deliver technology-dri

Broadridge
Broadridge Financial Solutions (NYSE: BR) is a global technology leader with the trusted expertise and transformative technology to help clients and the financial services industry operate, innovate, and grow. We power investing, governance, and communications for our clients – driving operational r

SBI Card
SBI Card was launched in 1998 with the State Bank of India, India's largest bank, as the majority stakeholder. In March 2020, SBI Card was listed on BSE and NSE. Today, SBI Card is India’s largest pure-play credit card issuer with over 19.5 million cards in force, as of September 2024. Its wide arra

Banco Falabella
Te invitamos a trabajar y disfrutar el Desafío de Crecer en Falabella Financiero, filial del Falabella, compañía con más de 125 años de trayectoria, conformada por Banco, CMR y Seguros Falabella, Fpay y CMR Puntos, con presencia en Chile, Perú, Colombia Argentina y México. En #FalabellaFina

FactSet
FactSet creates flexible, open data and software solutions for tens of thousands of investment professionals around the world, providing instant access to financial data and analytics that investors use to make crucial decisions. For 40 years, through market changes and technological progress, our

Dubai Holding
Dubai Holding is a diversified global investment company that continues to power Dubai’s growth across 10 sectors, including Real Estate, Hospitality, Leisure & Entertainment, Media, ICT, Design, Education, Retail, Manufacturing & Logistics and Science. Since 2004, we have made strides with an eff
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
